Mobile CVE Hunting
Before or during a mobile assessment, always fetch the latest CVEs related to the target's mobile OS version, SDKs, or third-party libraries.
Objective
If only the mobile testing type is selected, the agent must be able to independently look up the latest vulnerabilities to ensure no newly discovered flaws are missed.
Skills & Execution
- Use
search_webto query the latest CVEs for identified mobile components (e.g., WebViews, specific SDKs, SQLite versions). - Monitor exploit databases for recent proofs of concept (PoCs) targeting mobile environments.
- Cross-reference dependency versions extracted from APK/IPA with known vulnerabilities.